Healthy and actively maintained, with frequent releases, current repository activity, tests, and an organization-backed project. The main caveat is limited public documentation and no security policy, while contributor concentration is moderated by a second active contributor and organizational ownership.
88%
Total Score
100
100
94
90
Tests are present both in the artifact and repository, and repository-backed GitHub Releases compensate for the missing changelog. The absence of a README remains a modest documentation gap for a reusable library.
No repository security policy was found. This reduces transparency about vulnerability reporting and response, although the repository does use Dependabot and Semgrep.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
digital-marketing-framework/core Version ^3.14 | — | — |
digital-marketing-framework/template-engine-twig Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.